Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: AjE86+jLiZc+aKESpRJX6Q4S7pTRNg/qiis5RIuJPuw=
Subject key identifier: 49:5C:D5:14:D7:81:12:36:30:68:FE:1A:18:72:E5:5B:F3:68:CB:FB
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0199FBEC15EA0B3107635F041057BFADBF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: RjcJaWCoZ0p6awfbYh/HLpz/Fco5CkMICelS76Y+p7Q=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:15:ea:0b:31:07:63:5f:04:10:57:bf:ad:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=495cd514d78112363068fe1a1872e55bf368cbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:83:08:eb:ea:0a:ed:58:73:b5:0a:47:86:
c9:46:9e:39:2f:b5:3f:08:0f:1b:7c:de:a8:69:5c:
b6:dd:e9:f3:46:d8:8b:09:58:b3:f3:cf:d3:7a:f9:
99:c7:27:60:3d:cf:51:d2:68:5a:8c:01:00:17:ee:
10:25:dc:3a:d3:6d:82:73:5c:1c:a9:fa:c4:0e:1f:
8f:59:ab:f5:c2:e3:d3:4b:08:93:1b:fc:ba:fe:34:
1b:c2:2f:8b:ac:69:2c:6e:8e:a3:7f:49:fe:8d:9d:
0e:93:8b:85:55:59:e1:53:cd:a3:7f:4b:59:8f:b4:
f0:2e:b4:00:d9:53:01:a3:df:9d:41:4b:b3:4d:7b:
c3:26:e0:be:b8:49:5c:cc:d1:1f:c8:14:d0:78:4d:
75:69:f7:ba:ec:9d:90:33:3b:e1:21:98:a6:e0:1a:
48:77:b2:9a:31:c1:db:86:a7:ff:52:04:a5:58:7a:
44:67:b5:b8:e9:ba:24:40:78:f2:54:06:95:fa:5f:
f0:ed:79:8d:99:2b:df:29:50:11:69:b8:95:e0:a7:
9d:21:5b:9c:2a:ff:fa:cc:1b:98:7f:c5:61:22:10:
a7:09:0e:12:5f:18:23:ca:3b:ce:db:76:9b:32:66:
d0:a1:50:15:ff:06:d4:e1:cb:46:8b:67:4c:4b:77:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5C:D5:14:D7:81:12:36:30:68:FE:1A:18:72:E5:5B:F3:68:CB:FB
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:61:30:cc:c6:ee:31:45:01:b2:f4:77:00:7e:53:0e:6c:c6:
df:ed:35:36:40:56:91:ac:d3:ca:c4:c4:de:e5:08:e4:79:08:
74:e5:10:29:d9:9e:b2:4c:6b:34:86:b8:ab:f4:75:5e:f6:52:
06:6c:ff:21:c3:ed:c7:ea:ec:7f:60:22:c3:b6:69:b3:b0:a2:
03:21:1e:dc:9f:94:71:ac:8e:37:8b:24:c3:e2:f3:42:40:bc:
9c:30:a8:56:d2:12:8e:33:44:ff:25:ba:e2:62:b1:c2:0f:19:
30:f6:f6:a3:96:14:9b:c2:95:13:38:d2:f2:76:a2:7f:79:df:
87:74:d2:d5:96:6a:38:95:38:82:bc:3a:3a:c9:49:af:96:cd:
39:b1:bd:d1:53:87:31:b8:a5:cd:24:47:b6:ea:32:cb:33:ff:
2a:59:53:de:10:74:2a:26:e3:5a:bd:3c:34:5b:96:8b:39:56:
cc:6c:3d:15:5b:d3:f0:67:fb:92:4f:a8:d6:8b:e4:b2:1e:50:
bd:21:96:99:9b:cd:a3:bb:21:c6:e6:3b:84:8f:ce:3c:26:d8:
a6:88:a4:ea:b5:92:6d:e0:57:9f:06:25:b8:71:59:d7:49:d6:
6c:fd:ca:f6:79:6e:30:64:1f:c6:74:f8:4b:0c:c4:c7:57:16:
34:59:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:25 2025 by rpki-client